CVE-2019-1656 describes an improper input validation vulnerability in the Command Line Interface (CLI) of Cisco Enterprise NFV Infrastructure Software (NFVIS), allowing an authenticated, local attacker to gain non-root shell access to the underlying Linux operating system. This vulnerability specifically affects console connections from CIMC. With a CVSS score of 5.3 (Medium), the vulnerability requires local access and low privileges, but its exploitation could lead to limited confidentiality, integrity, and availability impacts. The attack complexity is low. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.9.1CPE matchmatch criteria | cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.